Let’s discuss SCOM SSRS permissions. The SCOM Reporting role install really comes down to three (3) things – permissions, latest SSRS EXE downloaded (for install 2019, 2022), and ReportExtensions configuration. I’ve hit some permission issues that need more ‘how to’ details.
Set SCOM Admins group permissions
Whether the permissions are set up as part of a group policy (GPO) or not, if these steps are missing, expect problems.
Verify that your SCOM Admins domain group is a local administrator on the SCOM servers (SSRS server in this case)
Right click on Start > Computer Management
Expand System Tools
Expand Local Users and Groups
Click on Groups
Double click on Administrators
Verify SCOM Admins group, or specific service/MSA accounts are listed
Click OK
Set SQL Instance permissions for SCOM Admins group
Reference Holman’s QuickStart > Install SCOM Reporting Role…
- Log on using your domain user account that is a member of the OMAdmins group, and has “sysadmin” role level rights over the SQL instance.
RDP to server with SSMS that connects to SQL server
Connect to Database Engine
Expand instance , then expand Security folder, thirdly expand Logins folder
Right click on the SCOM Admins group and select properties
In the pop-up, click on SQL Server Role
Verify that sysAdmin
Follow similar steps if using a domain connected SVC/MSA account when configuration differs from Holman’s QuickStart template.
Additional troubleshooting from the SCOM install can be found in the user’s directory – C:\Users\<accountHere>\AppData\Local\SCOM\LOGS
Find additional details in the SQL install logs
C:\Program Files\Microsoft SQL Server\MSRS13.MSSQLSERVER\Reporting Services\LogFiles
NOTE that the Instance and version 'MSRS13.MSSQLSERVER' can change
Additional documentation and relevant links
The go-to reference is Holman’s QuickStart deployment guides for SCOM2019 forward list the how-to starting point.
Holman Quick Start links:
https://kevinholman.com/2022/05/01/scom-2022-quickstart-deployment-guide/
https://kevinholman.com/2019/03/14/scom-2019-quickstart-deployment-guide/
SSRS learn.microsoft.com site article https://learn.microsoft.com/en-us/troubleshoot/system-center/scom/cannot-deploy-operations-manager-reports
SSRS Error occurred when invoking the authorization extension https://learn.microsoft.com/en-us/answers/questions/266488/installing-scom-2019-reporting-ssrs-2019-error-an
